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m^mi ] A«[IlS8(IC)cO«g»3y--|f-^.:^hSrra 

a. 

[ IMH 2 ] If 1 titem^o^gf ^) -oX. Ml E V 
^{ilS 1 ^ - 5 -^-X h m 2 ^ - S -^X i: coralt^ft^R L , 

1 ^ - 5 -^X i: m 2 ^ - S -^X t orall^f^ift L , 

mien 1 Rx/w. 2^-^ ^:i.\m^ii t HirieroHr 

^{±Sg 1 ^- 5 -hx i: m 2 ^ - S i: (O^tcftfi* L , 

#>-5r. Huiav-f y hVN-^'-y^rJg^-tl., t 

11*^116 ] IfiRJS 1 ^^h5(r>^^i'iXtHZBe.mc0^mV 
iil*lt:f*j^$ix. ^co^aSluiSV^ -V{±iiiilB«a«*«l^ 

^^ti^mizmihXo^zisL'owfi^tix\.^^. tz^ 
comm., 

[ If ^iH 7 3 If 1 6 ^-TixAHclfiiiiO^BT 
h^X, §^>CcmiBtgK)Il]S#0^^'5r<i:t-SP^$ri^- 

[ 11*118 ] imm 1 *^^> 7 ^-rilJtiHllBtiiO^S-C- 

ti, HulBv^-^-Ji. mjiBiWHtjifi;^v-h7:?-F*^^^ 
^^tilt^i,zmti^XoizMOim'^ixX^'>^. tz 

- b" y i/'-b- h \m.-t ^ /ca^cT) I ^ 1 0 0 L K±^ST- 
X . MIBtgill 3 y ;K- >- h IStg S 1. fS^ 2r J; 
■3 BX 0 fttt ^>^i7^c^ffix,-K^ i^a5«*>^> 0 , BylB»« 

[f»^)<iii 0] mim9^ztm.'^^m.xh->x , mim 

Clf«JSl 1 3 lt*JS9*/otil OtclBtfeW^ST J)-? 



T, HyiBlC{±;^-7-h;^-Ki^(cffi*^aSfL, fiia*« 

^fihmzWLfLhi.o\.z^'^\^\^hiKX\^h. hzh<r> 
[if*3ai 2 3 n*Ji9*»^> 1 1 cov^-rtL*>tciB«S£^^ 

HTJ> T , friB#«X7f>^ 1 ^ - 5 t 

friarn-fe ^(n')\-mzh 0 . luta^ 2^-5 -i-Mm 

[if*isi 3 3 if*ifl9*>(;> 1 1 cov^-rtL*HiieKo^ 
ST-s> o T . Btria#mx--KJr '^umtw. 1 ^ - 5 t 

m2;5'-5-^Xi:iOr9lCff^L, MfBm 1 &t/'ll2 ^- 
5-^X(iM:fi:tffiarn-fe /-9-«0?hg|5(c3^S. 

[IfsRifl 1 4 3 lfARifl9A^<^ 1 1 <r>\^-fixt-\,z%m<ni^ 
mxh o -c . ffia««x,-Kdr s^gewtiis i ^ - s t 

Sg2:5'-$-^Xi:i75rBllc#;5t. Huieig 1 &l/m2 :5'- 
[if*iai 5 3 imm9i}^i^ i4cr>\,^-rtii}Hzsmcom 

mxh-^X , fjie#mxd-:=^^gp«{±iJ'^=5:< t tgR^^S^ 

Huf a I ceo imm \^i,zim^rL. ^ ^^is* Buiaz»i:x,tf 

[W5}<iil 6 3 I«*IM97:)>^> 1 5c75V^-rtl*>tcfB«gO^' 

ax-S) o T . ir laggtuiiissco^^^ < 1 1, -as^^ 

^< HulBtE»:3>''-K-^^>-h±tC;b/i'^-<:^-=5r< t ilHJ 

Ciwii 8 3 ii^ifli 7(2ia««^ET$)'5-r. fjie 
^a. 

[000 13 

[^BBcoiii-r-s.sf*r^R3 ^^mmm^^coum^zm 

I, mzKcD^j'/^-xjiyi^-TV yy'&mfh-f^mt.z 

^ixh'^±\z^umthmi'zm^z^mxhh . ^m,m 

m^za^-^xmm^iv^^^ic^im-t^mz^mxh 

[00023 

[ta!*oS«i3 ^^"rV bV 3 y^^cr>K%i:imm-th 
T . 'Jm^j:mmfA'k-^ikh'rt,z^ U bWSr^flT-^ 
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[0003] fflEr^-rSrSSit-r-^fci^tC, 

[0004] tAi:OC7)ilS(r)J5c^T-^'- •/ "7°n- 

ICSi^cti "^-yT" ) ifi'f^Wl^s.V-i^ 
g y(decapsulation)tCj; OaStiiSiX'?. t C^ScOfSA^iC 

ring)" (7)IS(i, rn-fy^Sl/r^-rTi^ilx-i^ 

3 y(nn~}5'ksM-fhi^(r)Xhh. 

[0005] mmi\:)r^<^f^\ri^a.v-i^ a yig 

llff L T . 7°n - 1> ^'ffl ^ y r mfi L T t J; 
V^. WlMZ, ^-yT{ilD'N- y^r->''rtg|5c7)^-f 

TJi A S V F ±tc-7 -7 y h $ ixT V ^ S . MT-'n - ^ 
.-K- K V -^/U 3 > f - (PC) |^-r'<ftffl $ & J: 

y mut, V,,) ^/s-yxU-ieig*W(t$ixl.. 

K*^^l^*§ixS. t,t, VS'-yT-'J-^N°V-*>)IK)T§iX 

h t . ii^f- >y rii^ ^ u i*i{c«i?$n/i?*^w^tf ?g 
•yT-u-fy^i^gijL. ±MK mm. Vcc) 



[ 0 0 0 6 ] -#aiC, ID\°-yy-i>C0i*±-(b^!f^!ll^a5 

M^mi:X-^ ^^f3f§'<m^-t^^fzi!bl,zy y^ yy-m 

m^mm-^ix^, mmmz, -fc^x y^yy^Tttir^ 

X-7X -y ^ y § ix , 7°a - y $ ix § ^ c7) 

yi^-j:m±uiur-Mm$tih. 
[00 07 ] r7°u^-5^3 y • -X'<i^7 ^ ■ ic(a 
sic)^-^t^Jg^±c7)-^.y7°7^HfW ytcfcv^T, «ILT}SM 

=5r V \ / y 7^ y -i^*-'«v ^fz 1 1 X'^ y y i yf^- V 

>t^>ixTv^i>. 5fvStt^i5'"^^''^-v'3 y^-T-'f y^" 
tcJ:-?T»li$^x-rv>S*5S«:5^^{i. >s-.yxU-^NV 
-c7)ffliKflalSS^7^c{il?3i:filif§*Mm$ix^v^|5SO . jSMtc; 

J;oTI5tli$^r ^« $^iztfz, .iiy H^-f 

!> i d , --Jfy ^-7^ ^{i«^$^lh^^• 'y ^- =Jf^X'^ -y 

7°iO--ny ^•>'^°■y FS^^^°•y^— i^VN°-/ H(C|S-&L, xVN-f 

J; . ?^^6^^;Ky ^v^°•y ^: C:'!>0, 

■t=5:i5*>^^' ■/ f- 0 -^-^V-i/mmmf-lzA:^ ^ti^bZ 

[0008] 7°n-f yi?'Srft6(f ^lAtoiorro-f- 
*i . G i 1 berg <;> J: o r a^iSiS $ ix^c *ll#ltlg4 . 93 
3.898^. 1990^6m2Bmf<^m^"Secwe Integrated 

Circuit Chip With Conductive Shield" {rfBtK^ixT 
l^S. C:C:T-Gilberg<^>(i:, KCOi^mnmimofzlibc^ 

ut-^tfzii^tia±<^mmmi:mmi-^zt?:mij^i- 

ic^ii^. mmzX'oxmcr>iht-:)timi:^tiht , % 

[0009] 

{wntmikLXdt^hwm] Ltzt-'^x, mmi<zx 

h\z^-y y°coya-\Ly'y^mwt.fz\±%fltt^^W.t: 
tzt^\ ^(^mm.WiLi i^fzi^-ti^o, tS2^c7),Ky H V ^ 

isit t m^m^h '0 , mmmmxh h « :*:%B«{i±ie 

[0010] 

mm^mik-thtzi^co^m ^%mzLfz-ff->x . m 

-)VY\t, ^^:'J, CPU, ^^x^m^M^^ 
-^tfS^7•'a^: ytfco J; d y.-K-^^y F S:E«r 

-rs7t*^o*KSr#tficic<§gffl-r s J; 0 izmm^ti^ , 
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[00 1 1 ] V^t OHLRSihi^-^L-Kii, ro^r•y•9-S: 

f\-mzh^mi^-ii':^tr\^-by^i^znLxt>^mz 
hhm2i'~s.-)'^bcr>mzmm^ixxi:>x\'\ 

X9\-mRX/Xt fzl,i\^mzhh,^.cDmi,zW^LX t x 
K. tfzii7°u-^z-y^^mcr>t^yV^-^-y H^L<{4'J- 
[0013] ^mz, ^t.tz\m(^m%W(h\i., 

m^ih trn-fe .y-fiOi'|-SPtC#>^S51St/IS2:J'-5-^ 

^^umFf-mm^m^mm-^x^JX<, mj/^tzM 

[00 1 4] ^«g|5«(S, nfii#i: tro-fe'/-*f(7)r*]g|5tc 

s>^ig 1 &t/'m2 ^- 5 -rx<7m^z\^m.^fix 
[0 0 15] 'itaMmzi6\~^x , mm.umt, 2*«x;if 

X. 0 i<zi^m^tifz'^m'^^h z t i>x-^ ^ . 

izMtxTvyh^ti^, io^-^t, icco^mmi:^ 

[0016] -r^TwfliiSitciiov^T . rztx.mMtimm 

t izsizp} Lfz tlxh, ^'pizwv-'fzmmmmi^mco 
mm^j:imi^x.^fzisb. mmm^wmmmr^- 

MLxmmmmmmt^j:^. STro-^'L^^o^m 

^WOKiaSr iStt h fzibl,z , MWitTu - y'^W^mz 

^io±.wtz±tmtchn^X'rru-^X'^hXo{zm 
cr>{m.\,zm%rx:i- -/ ^ HlSfiS; L =5: (ti-t =5: v ^ * 

[0 0 17] mmhmx.\.f^z\,z^tixh 

*>, ■7 yt°>-i?'--ri>) <7)tcfl:^-?'f ^o;^3-7°$:figffl 
-ri>C0$ri!6(f-S.^< . i^ro -b ytfi: fif±«c7)h yrgS 



mm-thh, mm.zt->x^^j:hmmmt^j:^ , wz 

[00 18] ^fglC(4>^V-h;!7-Krt(:«j^$ix-Ct> 
[0019] WJUa^tc. -?>f 7omT«T^^Ta-t•> 
[0020] 

[ m^Bc^mmmm ] t ^ r? - y ^ t-fsffl $ i. ^ 

^7°0 -t -y J; ') ^ggiD 3 y 4^- y h ^ t D 0 S 
^rVUotC) , mill9lSSfflc^V^t'';illLRfiil:(anti-tainp 

[oo2i]iii{±, f^-vyi^a-u-h^iitzmmm 
Siicr>M^mt^tifzmx'hh » mmmssioojix.+f^ v-m 

i-f t,-^t^!)Ml«l 1 0 S: , ^ < N° y - v'' b° y P*i>' U - 
H 7 -VW a t T ^ ^'il d^' y N° 'y F B>\Jg^ $ fi 
■rt/^.§>, 4<'y FV^••y K ^/cti^W v-v-y Fii^J^WlSOcT^jfl 
jaicii;b o T u & ^ < <^^JR^-^ f y cotA i: oT'J> o 

f^^N°-y Kc73t°-y^{4, R«ti-r-I.I/OH^"y NV\"-y 
H BO cfPalj^^iOrBl^Oggm ( i?>] X. {i' , S ^ o y ) T-J) I. « 
y^(4, ^am'f-m^^iitsi^V^y-?^ 
^\j^-yy'i)^^f&i>„ y^°•/^^-i^■h°yp, '7-f-Vwai/'d^' 

y^v^••y^'B^±, ic i(xyx^ir/'?-c:*^'^mi5i!Sray^. ^ 

® 1 30 & a o T V ^ X 4-°^ y •fl:-^!f^!l*^'±f E L -r 
df A-ry A r ^ y^^'XgSrffi'p-c^^^n/v: t S , 

[00221 '7'f-\'tf-^{4, m^^V-(^-f}^y-f\/0^-<-y 
H i: ^ N° 'y ^ - yv N° -y H i; OPaltctg^ $ ix I. i; -I ^ O ^ 
V N° -y ^- y y WItC Jo it h OCOXST* 1. . ;i 
^-f 130{4Sgl!)=jyd^-*y hl50, 152. 

6i^t^. mz. ny--K-;t-yM50{i:. ag^+ffg^-^ty 
^^7°a-b-y+»-T-$)oTi>^v^„ C 3 LT^J'W 3y4-°- 
^^ y h (i . i^^-mmRWm)) 3 y ;K- 4^ y h cr,ij^comi¥ 

[0023] I112J4, ^^BJUcfi^av^tDlHlLI^iV^ 

A'y-;i^F^^-rsm«iM]sg^7)iTigH-c-^^^. ic 2oo{i 

h .yTX;f:dr5/Ji210S.J/'4i' h-A.X;K^ i^m2\2i^-t 
^^y¥UA^210ti:i:(y>mmMW)^^^yYf^ y K260 

^ J* hxd\,z^^^ix.x^-^h. tmmn'Wt 
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M§T ^ ^ V ^ J; a tc, ^ L < « ^ y ^ 1^1 ^ #*ietcff »T- 
{ 0 0 2 4 ] $ ^>l:, ««g|5W270«i:. F/rStfO^^*^ 

[00 2 5] ^-3 >Jl220tS/::Jf-i.'^ix 

$ixAcy-f c7)±m.m±^zmm.^ixhT^im{m^-^ ^ 
xfy\(.^myk, y^y}^'jyiy''yy<-'y. RW^^mii^izx 

"f-i^ny^mmi-t. 

[00 26] i/-;UH230<i, El 1 c7)3 M50 
— 1 56<7) J: d ^ I CrtgPtfO $ ^ * ^ :a >-;f °- y h ^fl: 

7!)^'jS'^>ix^ t . immm^y=i<-^-yhf)ms.mmt, 

yj^T^'-tX^^V (RAM)^<7)^^7"n-fe -y-9-(7)|*lgBc7) 
((^J;i{f . mE^-fb) i:miii-tlfzi^^Z7^^m=F'7 

mi^ixtzw>^^cr>mmjA.'^ o t $ -it-?. , m%=^~ 
jv Y\mitmni,zum^ixx: t i < , ^fiiia«25oi^ 

y^mLTM<7)mzy-! commizhtz nxim^ti^i^'j 

^commmm^xh^ . ^yv=yy^\ qzm tx, mm 
mz. tmmi=yv^yi)'i^^h, 

[0027] ms^^tlfzXoiZ, ASICi^id^^'/r 
(i , fzbx. y^ s y ir ij -^^^O e aifli*#1± *f 

x'im&^mm^j:^mx'y-( ^mm^^hti^. ^^mz 



h <r>\,z>m^ ^ith^A y'(D:r^y yv^^^iocdx o 

mwy H -7 ^ -v^ fcnut-:>tfci.i^iivj.±cr>mm^ 
m\ m^y-< imd xdi^znm^ti, -e^ojs^t^to 

izm±^t^mmm^m^zh d . crymm^ff^ixx 

^t^m (mm. «210) :<)^'[li*:-(bLfci:l'. ^ix 
ii. *:yh''7-f-\'S:5S«t (CT;i{f. figo-c) S^ro 

^ ■y^a)^S.mmi:mtih^-^h1^fkmzX'^X, imu^ 

V ^ Sr i5^±-r ^ ^ < ^' ^ ^ y k <iMSr ffiffl 

-tl> ^ t ^ J; ffliltci--l> J; 9 :5r?SI.^^ P5W^!)^ t ^vi 
[ 0 0 2 8 ] M ;c «■ , ^^yr-'J-m^h com^^imfilz X 

-oxim^tifzv^^i- -yycom^ui. t tmm^Wj^ 

h^ti. ^rLizxr-XT'-ycom^ii^^i^mz^tLi. 
h Lmm3m^^< -y x u -nmn^-^^^^ l^v y 

x^ fztLxh, imm9^mimm-mm^j:'£^Wd:mm 
imni-^tx. y°u-\zyyi,zx^ii(.m^mf'^ti 

[0 0 29] fzhwmttmmMM^^m-th 

Ct^<Ji210^^^?£Kv5^<l^iX'g'/oi: LTt. M 
{cJ;oTiK<^ii.&« ^«gPWF^«^JR«xdfdfy^x-7 

^yy-t^co[z^Wj:i\L^^:^ -y i-yy^tRHi-t^ X 

dl,zmM^tlX^^^<7)X. ZcoXoI^z^j:^. Ltzij^-y 

X, :i^-y^y y'imzM utnmi&^^m:k^ & ^ r /^ 

cold ;5rf&o^M{±x ^^yymzn Limmw^^ 

Tft^$^xti«f . x-y^y^-?S{iJ; mm^zKm-th, 
« t T . 2»«^ffW^4^7)iitR(d^#^cox -y ^ yy\mz» 

xoiizi'^hftht^, mmn.:^-^^ i^\,m><z^mxh 

[0030]ia3{i, *%BJ(ctM9V^tOlHlLIW±'iiy 

w-mmini^Lfzi:,<nxhh . tm^yu-t -yvi^ii 
mn^. RAM 300. ^^mnmm^m{cp\i)3Q2. n^t 

0 ^ U (ROM) 3fiA-m/'f~ 9 Bf -^-fb^Jp (DES) yzi 

ffl|g&^-i>^<mii$il.'i>^ (non-secure) 7° a -b -y 
-9-tC)l:ttTtl«l^{cJteffl^«E-C'*S. \^fzif'}X. ZZ 

X-mm^tl^ "ro-b-y-^" CTJlSti. Hf-^-'fbrn-fe y 
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[00 3 1 ] m3\i, \Zcr)\^t^nLmiti^-)V¥\^X:- 

[00 32] Ut-:>comf&mi,z}5\^X. IE«)±Vi,,ttSr 
FV^°■y F312, FL— X314, S.?/';Jf> F>'^°•y F316^« 

•y F'318^4;t^.^X. -?-^X{i-+ri^F>'N°'y F320, FU— X 

322 . y F / >° -y F 324^S^6<)tcS^ $ ixT V ^ I) . 

lEVbattti. j^iW^ifcB^tcra-t ■y+;-i50ogt!jit^3i 

[00 3 3] 7n>F'7-f-\'(i. rn-fe y-tflSO^O^'hgPt:: 
^>^d^■>-F^^°■y Ft , To-fe •y-if 150c7)I^g|5tCj>^ ((91J 

tl^, -i<>FV-f^313{i?l-gB--n>F^N° y F312 

$iXT i> J; V \ y F326{iRAM300<7)i'[-(i(Cj> J; ^ 
^F^ixtv^l.**', 0^$^x'5rv^^;c(f Fl^-X^riitT 

[00 34] [al^mtl, CPl302c7)^J?5tCfcV-.T, -ii>FV 
^ -^319(i. ro-t •y-'f 150cO5'f-g|5iO7l-;> F^n°v F320 
k, rn-fe-y-9-150iO|*lgPcOCPU302«;K:xF>'\° y F328i: 
cOPBl(3ti^$^-g>o --ti>FV-f ^317(i:rn-t .y-tfl50cO 
J'hgPtC F^^°•y F316t ro-fe y +M50O|*Igi5tC$) 
i)CPU(7);fC>-F/^°■y F332i:(7)^lcS^^$ixT t J:>.V RO 
M304OmiitC:*5 ^^X. ;K y F V ^ ^325J±^'t-g|5 ;K y F ^ n° 
•y F324i:ROM304cO|*jg|5;Ky F>'^•■y F336i:corHlWt^$ 

[00 3 5] ::nyVV-(^ii^fzm-^b tTa•^r•y^fl5 

Orat;S)-l.'-n>F^t-y FcT^raltCtSM^ixTt f?ij 
m. 'i^> F V-f -^r331(irta5/-l^> F^N°-y F330i:338i: 

[0036] $^,H*:yF'7-f -\'{iro-b -y ■9-150cO3'h 

gPtcJ).?)'-}l>F/N° y FPBltlJgS^§n.-rt J:V^„ (^Jttf . 
TTsy F V ^ •V341«ii'hg|5 ;K y F ^ N° -y F340 1 342 1 cOPbIC 
TKyFVf A'345(i5'hgP;l^>'F>'N"-y F344i:34 

[00 3 7] f«DWiC, ;li>F'7^-V{±. 'J-F^P- 
Fi: . ^hSS^ L < {il^^*> Fv^°■y F^/siti 

flfe<7) u - F 7 1— A 3 y ^ ^ F t comizmu^ti'i^^ . 

mtif. *>FV-f -\'351{±U-F7^-An>'^' F3 
50 1 ^\-S^^^y F^N° -y F352i: «Pa14ctg^$ilT t> J: V ^. 

F V-f •\'356{i U - F 7 V—/. ziy^^h 355b l^gP 
;J<yFM° y F357fccoraWgM$ixTt iV^. iifiyVV 



^ ^36m U — F 7 l^-An y^^ F360 1 ffi<7)U - F :7 
W-Any^i? F362t<?)PBltcfi^M§aTtiv\ 6Si^ 
T^s^tl?>Xdiz, IJ-F71— Arjyi?^? F362(i, 
ny^^ F360j; Oi>7°n-fe y-tflSO^^^^iK (cgeg$ix 
;^C^N° y 'J 'J - F-C S>I> « El 3 to 'J - F 7 l^-ArJ y 
:J'^'FJlt/4<yF^N'-y Fc^ieSti, 'i:^-rt tttl.'£^®(i 
;5rv\ 4i"y F'7-f-V366(i';-F-7^-Aay^'^ F365 
i: J-hSS'l^' y F ^ N° -y F 367 i: c^mizim ^tlXi^XW 4^' 
y F y ^371{i 'J - F 7 - A rJ y F 370 1 'J 
-F7U-Arjy^^ F372i:C7)racS^i^§ixTt> J; 

[00 38] 4iy Fy-^-\r{±. --i^'yF^'-y 

F^ L < {±7°n -fe y -9-1500 'J - F 7 P - A rj y ^ F 

hl^rn-t ■y-9-150*>«oaStil> ^•6<7)T:3-^■;K- 
F (^J^{^. ^N-yr>-yl^3yh°A-^-it-F) tSrEfg 
Jlc^L. i/iti^i'y FV^-\r*^'ro-fe -y-tflSOtcJ: 

^. --It- F i/i{iffiiO(4B*-A,^ -y 7VN°-y 

-r s T^ittT- . t ^ 1 0 0 Li5fe±;j<y F "7 ^ ^i^mm-tt . 

[0039] #Jds^j(c , --ny F V ^ , Si^^y F v 

Kp<. mi.i£f\^-rbl-X (H^r-ti-f ) MTa-fe^y-^co 
^iB*»'^?itixTf*:^-tl.ctdtc. ^hgl5>N"'y F340 t342^; 
WPalCtie^ $ , [5l1t0^i)3!c*^' 3 y ^ ^ F 370SLt/'372 
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1. Title of Invention 

ANTI-TAMPER BOND WIRE SHIELD FOR AN INTEGRATED CIRCUIT 

2. Claims 

1. An anti-tamper apparatus for protecting an 
active component of an integrated circuit (IC) from 
probing, said apparatus comprising : 

a wire adapted to carry a signal which allows 
said active component to function; wherein: 

said wire extends^ at least in part; over said 
active component to hinder access thereto when said 
active component is functioning. 



2. The apparatus of claim 1, wherein: 
said wire extends between first and second 

terminuses ; and 

said first terminus is external to said 
processor and said second terminus is internal to 
said processor, 

3. The apparatus of claim L, v;herein : 
said wire extends between first and second 

terminuses, and 

said first and second terminuses are both 
external to said processor. 

4. The apparatus of claim i, wherein: 
said wire extends between first and second 

terminuses; and 

said first and second terminuses are both 
internal to said processor. 

5. The apparatus of one of the preceding 
claims, wherein: 
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said wire forms a grid pattern, 

6 . TJia apparatus of one of the preceding 
claims, wherein; 

said wire is carried, least in part, within 

a protective layer of said IC such that said wire is 
adapted to rupture when said protective layer is 
removed . 

7 . The apparatus of one of the preceding 
claims, further comprising: 

a metallic shield layer which shields at least 
a portion of said active circuit. 

8 . The apparatus of one of the preceding 
claims, wherein: 

said IC is embedded in a smart card; and 
said wire is adapted to rupture^- when said IC is 
removed from said smart card. 

9. An anti-zamper apparatus for protecting an 
active component of an integrated circuit (IC) from 
probing, said apparatus comprising: 

a conductive epoxy member ad.apted to carry a 
signal which allows said active component zo 
f uncn ion ; where in : 

said conductive epoxy member extends, at least 
in part, over said active component to hinder access 
thereto when said active component is functioning. 
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10. The apparat-ua of claim 9, wherein: 
said conductive cpoxy niemtier is printed, at 

least in part, on said active component. 

11 . The apparatus of claim S or 10^ wherein: 
said IC is embedded in a smart card; and 
said conductive apoxy Tner±>er ±9 adapted to 

rapture when said IC is removed from said smart 
card . 

12. , The apparatus of one of claims 9 to 11, 
wherein; 

said conductive epoxy member extends between 
first and second terminuses; and 

said first termnus is external to said 
processor and said second terminus is internal to 
said processor. 

13. The apparatus of one of claims 9 to ll, 
wherein : 

said conductive epoxy member extends between 
first and second terminuses; and 

said first and second terminuses are both 
external to said processor. 

14. The apparatus of one of claims 9 to 11, 
wherein : 

said conductive epoxy member e:<:tenda between 
first and second terminuses; and 
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said first and second terminuses are bcth 
internal to said processor. 

15. The apparatus of one of claims 9 to 1^, 
wheraan : 

said conductive epoxy member Is carried. At 
least in part, within a protective layer of said IC 
such that said conductive epoxy m^tnber is adapted to 
rupcura when said protective layer is removed. 

iG. The apparatus of cne of claims ^ to 15, 
further comprising; 

a metallic shield iayGjr which shields eat least 
a portion of said oictive circuit . 

17, An anti-tairper apparatus for protecting an 
active component of an integrated circuit (IC) from 
probing, said apparatus comprising: 

a wire structure which expends, cit leasu in 
part, over said active component to hinder access 
thereto* 

18. The apparatus of claim 17, wherein; 
said wire structure forma a grid pattern. 
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3. Detailed Description of Invention 



BACKGEOnNt) OF THE INVSNTION 

The present invention relates to the protection 
5 at integrated circiiirs (ICs) , anc mora particularly, 

to a scheme for preventing -he reverse anginear^ng 
of ICS. The invention is particularly useful in 
protecting secure ICs which are used in cable and 
satellite tcievision decoders to prevent 

10 unauthorized users from receivitig television 

broadcasts . The invention is equally useful in 
protect inc- secure ICs U£sc in ct:her applications, 
including terminals and smart cards tor electronic 
funds transactions, premises access control, 

15 electronic games, and the like. 

Due to the ccntinuing papularj,^y cf -be pay 
television market ^ there exists a tremendous 
financial motivation for unauthorized persons known 
as "pirates" to modify the access con-rol of set -top 

20 boxes {e.g., decoders) to allow the reception of 

television programming without payrr^en- of the 
required subscription fees . The mod-f ied decoders 
are purchased by unscrupulous individuals through 
^'-arious marJcets and used to illegally receive and 

25 view the television signals. 

To produce a modified decoder, a pirate must 
extract certain information from £ genuine decoder 
which is usually known only to the authorized 
manufacturer. The decoder typically includes a 
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secure (e.g.; cryptographic) processor which, 
conta-ins information such as cryptographic keys 
which are used in descramhling a scrambled 
television signal or other progranuning service 
5 signal (e.g., audio or data) . Since the secure 

processor performs access control functions, it is a 
focal point of the pirate's attention. Accordingly, 
the pirate wi^ll employ various techniques in an 
attempt to gain information from the secure 

10 processor. 

One common attack technique is known as 
"probing." A secure processor includes an 
integrated circuit (IC) whiich is fabricated as a 
monolithic device with an ensemble of accive and 
• 1.5 passive components, including transistors, 

resiscorG, capacitors, and diodea which are 
interconnected within a monolithic bloc^<: of 
semiconductor material. During probing, ic^ surih a.^ 
very large scale integrated (VLSI) circuics are 

20 subject to an invasive attack wherein the die (e.g., 

IC or "chip") is exposed by decapsulation. Daring 
decapsulation, the compound mintsrial which 
encapsulates or surrounds the die is systematically 
removed. Then, probes which measure current and 

25 other parameters are used to monitor the electronic 

signals in the accive components of the chip. The 
term "tampering" as used herein is meant to 
encompass bcch probing and decapsulation. 
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A pirate may perform the following 
decapsulauion steps Lo prepare a chip for prQ]::>irig, 
First, the chip is removed from the decoder board, 
with the die still inside the IC package. 
5 Generally, this is the case when a cnip Is mi^untec 

on a large board. The dGCoder board may be a 
computer board such, as those used in a personal 
computer (?C),. If Che chip requires a direct 
current ' from a batzery or the li}ce to r:!l rr.mnven- £ 

10 sel£-destr\ict feature, then battery v/ires are 

soldered to a pcsicive voltage pin (e.g., V,,^^^) P^-" 
and CO a negative voltage pin (e.g., v^„) on the 
outside of the chxp prior to removal from the board . 
The chip is then recr.oved from the board with the 

15 battery wires still attached. If Che battery power 

is interrupted, the chip may self-destruct by 
erasing critical informatron stored -n memory. The 
pirate can identify the appropriate bat.;ery pins oy 
talcing resistance measurements of the traces on the 
. 2 0 board which axe connected to the battery, anc then 

confirming by taking voltage readings of the traces 
v;ith a main, vcitage (e.g., V^^} off. 

Second, the location of the die within the 
encapEulating compound of the IC package can be 

2 5 determined by caking an x-ray of -he IC package. 

Third, a mechanical grinder can be used to remove as 
much of the encapsulating compound as possible above 
the top surface of the die without damaging Lhe die. 
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Fourth, chemical etching or plasma etcning is 
performed to remove the last portions of 
encapsulating compound which recnam over the area of 
the die which is to be probed. Some chemic5.1 
5 stchants woric so well on the encapsulating compound 

chat the grinding step can often he skipped. 

In current chip designs, including those for 
application specific ICs (ASICs) , a pirate wxll 
generally not encounter significant 'obstacles m 

10 performing the four steps above. R.emoval of the 

chip from the board with the battery wires still 
attached is usually :^onsidered to be the most 
delicate operation. Thus, the undamaged die, which 
is protected by an inert glassivation coating, can 

15 be exposed by a pirate as long as a short circuit or 

open circuit of the battery powf^r is not created. 
Furthermore; damage to bond wires can also easily be 
avoided. Bond wires may connect bond pads of the 
chip to pacJcage pads in the protective encapsulating 

20 package, and are located on the periphery of the 

device, as will be discussed in greater detail 
below. The decapsulation process can avoid exposing 
the die in the area where critical bond pads are 
located, that is, v^'here ths battery power is input 

25 into the active component. 

One approach to deterring probing is discussed 
in commonly- assigned U.S. Patent 4,933,898, issued 
June 12, 1993 to Gilberg et al . , entitled "Secure 
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Tntegraced Circuit Chip WiCh Conductive Shield." 
Gilberg et ai . disclose using one or n\ore conductive 
layers to overlay a secure area of an XC . "he 
conductnive layers shield the secure area from 
5 inspection and carr^*- a power signal to the ZC, 

Removal of one of the layers by a pirate causes "he 
loss of power to the components of the secure area. 
However, the implementation of this approach is 
somewhat corrrplex. 

10 Accordingly, it v/ould be desirable zc provide 

an apparatus which deters or otherwi^G hinders 
probing ox an IC chip by a pirate. In particular,, 
it would be desirable to provide, a harrier to 
decapsulation which uses standard bend wires to 

IS rentier the ZC non - f unct ional when zhe bond vira is 

ruptured. The barrier should be compatible with 
existing chip dDsicns and inexpensive to implement. 
The present invention provides a system having the 
above and other advantages . 
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SUMMARY OF THE IlfVENTlON 

In accordance with the present invention, an 
anti -tamper shield for an integrated circuit (IC) is 
presented. The shield Is aflapted for use with an IC 
5 which includes a substra-e for carrying an active 

component, such as a secure processor which may 
include a memory, CPU, and ether micro-electronic 
components. The IC may ha-^^e a protective layer such 
as an epoxy encapsulating layer for prac,ectiug tlie 

10 processor. 

The anti-tamper shield comprises an 
electrically conductive metnfcer such as a bond vire 
Car carrying a signal which allov/s the procesoor tc 
function. This signal iray include c. steady state 

15 electrical current which is supplied by a battery 

via positive and negative -erminals. The wire may 
be carried, at least in part, ir. a protective layer 
of Che IC such chat remcvai of the protective layer 
will rupture the wire, thereby causing an open 

20 circuit. 

The wire may be coupled to the processor in a 
variety of configurations. For example, the wire 
tuay be coupled between a first terminus which is 
external to the processor and a second tenninus 

25 which is internal to the pirocessor. Furthermore, 

the electrically conductive member may extend 
be-ween points which are external and/or internal to 
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the micro- electronic ciroiits of the processor:. The 
terminus may be a bond pad. wichia Che processor, or 
a bond pad or Lead frsne contact outside the 
processor, for ejcacnple . 
5 Alternatively, the wire or other electrically 

conductive member inay be couplcc between first and 
sficond terminuses, both of which are exzernai to the 
processor. Tixe wire may optionally traverse the nop 
surface of che micro-electronic circuit, and/or iciay 

10 extend iii a region av;ay from the micro electronic 

circuit and/or processor. 

The electrically conductive memloer vr^y be 
couplerl between first and second terniinusss, both of 
which are internal to the processor. 
; 15 In another configuration, the electrically 

conductive member m<Ay comprise conductive epcxy, 
dr_d/or a substance which is tai lored to have a 
desired resistance to an c t chant . The conductive 
epoxy may be printed as a trace over the micro- 
• 20 electronic circuit. In this case, the use of an 

et chant by a pirate to renr.ove che protective layer 
of the IC will also destroy ihe conductive epoxy. 
thereby terminating the signal, which allows tne 
processor to function. 

25 In all configurations, even if a pirate was 

successful xn decapsulat Ing Che die v/ich zhe 
conductive members intact, the conductive rriember 
would pose a physical obstacle to probing with 
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mechanical prcrses or an eleccron microscope sines a 
conductive member suspended in space present: a 
hazard that is difficult to overcome. Probes must 
be continually litted and reccnf ig\ired inzc netv 
5 positions by the pirate "o allow ciffersn" angles of 

approach in order tc probe a die sind avoid rupturing 
any of tJxe conductive members, ir. fact, zhe 

elect "ri cally conductive member may be formed in a 
grid pattern to further aggravate probe poa i t ioiiiny . 

10 Furthermore, a metallic shield lawyer may be 

disposed between the processor and the zcp porticu 
of Che encapsulating layer to prsvant a pirate frocn 
using an electron microscope, for example, to survey 
(i.e., map) the processor or the micro-electronic 

15 circuits contained therein. The use of a metallic 

Shield in conjunction with the antl-tanper bond-wire 
shield poses an additional obstacle to zhe pirate, 
thereby maXi-ng the pirate's task more time-consuming 
and expensive . 

2 0 The IG may be cam.ed in a smart card. 

Moreover, a portion of the body of the smart card 
may provide the encapsulating layer. 

Optionally, a wire which does not carry aji 
electrical signal may extend, at leas~ in part, over 

25 the micro-electronic component to deter probing of 

the micro-electronic component. In particular, the 
wire may form a grid pattern which makes it 
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difficult for a pirats to position and nove a probe 
tip naar the niicro-alactror.ic cnmponent . 
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DETAILED DESCRIPTIOK OF THE imnSNTIOW 

An ant i- tamper apparatus for an integrated 
circuit (IC) is presented for prevenning active 
components, such, as a secure processor used in a 
5 television decoder, fron being tampered with (e.g., 

reversed engineered) . 

FIGURE L is a simplified diagram of a 
decapsulated integrated circuit. Taa integrated 
circuit HC} , shown generally at 100, includes an 

10 epoxy encapsulating compound region 110. A nurrber 

of package pins ? are connected -o respective bond 
pads B via lead wires W. A bond pad or die pad is 
one of many metal connection pins chat reside in the 
periphery of the die 13 0, and are used to couple a 

15 unique circuit portion (e.g., input/output (I/C) 

port) with a corresponding external package pin. 
The pad pitch is the distance (e.g., in microns) 
between the midpoints of the adjacent I/O bond pads 
B. The die can comprise, for example, a siliccn 

2Q micro-chip which contains micro- elec tronic devices. 

The package pins P, wires W and bond pads B carry 
current to and from the IC 100, and aro exposed when 
Che epoxy compound which normally covers the die 130 
is removed using the decapsulacing steps discussed 

25 previously, 

Wirebond is a step in the die packaging process 
where thin wires are bonded between the die l/C pads 
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and -he package pads. The dis 130 includes 
exerr.plary aczi^e compcaents 150, 152, 154 and 156, 
In pariicular, compon-ent ISO inay be a secure 
processor which includes cryptographic information. 
5 Thus, the die components are exposed and can be 

proted by a pirate to ascertain ::tie cr-^^tographic 
infcrmaticn and other operating cliaracceristics of 
tlie active ccurpouents. 

FIGUR3 2 is a cress-sectional vicv/ of an 

10 integrated circuit witn an anti- tamper bond wire 

shield in acccrdance with 3he prese^nt invention. 
The IC, shown generally at 200, induces a top epoxy 
layer 210 and a bottom epcxy layer 2 12. An 
electrically conductive member such as a bend wire 

15 '2 70 is shewn coupling bond pads 26 0 and 262. Note 

that the electrically ccaductive member need net 
have a circular cros 3 - sect icn . Thus ^ it should be 
understood that the terms "electrically conductive 
member" and "wire" as used herein are not limited to 

20 a single filair.ent meniber having a circular cross- 

section, but rr.ay encompass conf igvirat.i cn?^ including 
a number of filaments which are wound cr twisted 
togecher, a configuration with a varying cross 
section, a configuration with a rectangular cross 

25 section, a mesh ccnf igurat ion, a configuration 

wherein a single wix'e is coupled to more than two 
terminals, or virtually any electrically conductive 
member. In particular, the wires tnay be provrided in 
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a grid pattern with 3. spacing which is small enough 
to prevent a probe from passing through the mesh or 
moving easily within the mesh, as discussed be Low in 
conjunction with FIGURE 4. In fact, a grid 
5 configuration may be used even when the wire does 

not carry an electrical signal which the processor 
requires to function. The mere presence of the grid 
serves as a deterrent to probing. 

Furthermore, the eiectrxcally conduct:.ve member 
10 2 70 may comprise a substance such as canduc-ive 

spoxy which is formed by dloping epoxy with a 
concuctive material such as silver to achieve a 
desired conductivity. Advantageously, the epoxy can 
selected to have a resistance to etching which :ls 
. 15 similar to the resistance of the protective layer of 

the IC, and/or the resis Lance of the conductive 
epoxy can be tailored according to a specific 
etchant which a pirate is expected no use. The 
ccnductive epoxy may be printed directly to the 
. 20 surface of the die. 

A glassivac ion layer '^20 is also provided. 
Glassivation refers to an iner- protective coating 
which is placed over the entire surface of a 
completed die to protect the circuit. Glassivation 
25 protects the surface of the d^e from chemical and 

moisture contamination, handli.ng damage, and the 
possibility of shorting the d:ie caused by loose 
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particles. It can also inhibit metal migration anc 
otlier metal degradation. 

A shield 23 0 is a metal layer that provides 
current to various components wlchln the TC 2 00, 
5 such as the components 150-15€ of FIGURE 1. If 

power to the shield is interrupted, then a sectire 
processing component may self-destruct such that 
cryptographic; data which is stored in the secure 
processor is erased. Additionally, the shield 23 0 

IC serves to prevent a pirate trom usine a scanning 

electron microsccpe to detect changes (e.g., voltage 
changes) in portions of the secure processor, such 
as a random access memory (RAM) , and blurs the 
distinction between pares which are coated by the 

15 shield- The shield rr.ay be located within the 

encapsulating layer, which includes one or more 
protective layers which are disposed above the chip 
in the substrate 250. A passivation layer 240 is a 
protective surface ccat comprising, for example; 

2C silicon dioxide which is deposited over the surface 

of the die during varicus diffusion steps. The 
substrate 250 is the physical material upon which 
the IC is fabricated or assembled. Fcr a monolithic 
device, the substrate typically comprises silicon, 

25 As discussed, a chip such as an ASIC can be 

decapsulated by a pirate to expose the die in a 
relatively straightforward manner even when the die 
has a battery powered self-destruct feature. in 
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accordance with the present invention, one or more 
electrically conductive members such as standard 
bond wires of the type used to connect a bond pad 
with a package pad, such as bond wire 27 0, are 
situated to cover the die such that an anti- camper 
shield is formed. In particular, during fabrication 
of a chip, the encapsulating compound is in a molter. 
state and flaws around and below the an.t i -tamper ' 
bond wire which are suspended over the die. When 
the compound (e.g., layer 210) has solidified^ it 
provides a formidable obstacle as it is mors 
difficult for a pirate to use mechanical grinding 
equipment to remove the wire-embedded layer for fear 
of breaking {e.g., rupturing) the bond vires and 
15 initiating the self-destruct feature of the secure 

processor . 

For example, in the case of a cryptographic 
chip powered by a direct current from a battery or 
the like, if the electrically conductive member is 

20 ruptured, power to a RAM which maintains the secrei 

data will be cut, thereby causing the data to be 
erased. If a electrically conductive member z.s used 
in a component which did not have a battery powered 
erasure feature, then the electrically conductive 

25 member may instead carry various control signals. 

However, even the rupturing of such a control 
signal -carrying electrically conductive member 
without the erasure of secret data would thwart a 
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pirc-ts's probing attack unzil the pirate performed 
ths necessary time-consuming and difficult repair. 

Moreover, even if a pirate could somehow 
carefully remove the layer 210 without rupturing the 
5 electrically cor.ductive member, by the time the 

epDxy below tMa conductive tneiiuDer is etcher^, -he 
conductive member may be eaten away and ruptuxed due 
to the corros^ivity of the enchant. This is true 
since the metal in the conductive Ttiember is chosen > 

10 to react to the chemical etchants which are useful 

in etching the epoxy . Thus, it may be desirable zo 
chooac a material such as aluminum; which has a 
relatively low resistaijce to etchants. 0'-:her 
metals, such as gold, havG a relatively high 

15 resistance to etchants. Moreover, if a conductive 

member is powered by a battery, etchants will react 
in a more aggressive way. Generally, the selection 
of the conductive member material can he tailored to 
provide a desired resistance to particular etchants. 

20 Conductive epoxy is particularly useful as it may be 

formulated to have a sim.ilar resistance to etching 
as the epoxy encapsulating layer. 

FIGURE 3 is a top view illustrating, in 
simplified form, a secure processor of an integrated 

25 circuit with an anti-tamper bond wire shield ir: 

accordance with the present inven::ion. The secure 
processor 150, includes exemplary micro-electronic 
components such as a RAM 300, a central processing 
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unit (CPU) 3C2, a read-only memory (ROM) 304, and a 
Data Encryption Standard (DES) processor 306. 
However, note that the present invention is equally 
applicable to non- secure processors which may be 
5 protected to preserve unencrypted but proprietary 

inf oroiation. ThuS; the terTxi "processor" as used 
heirein is meant to encompass encrypted procesfsors, 
non-encrypt8Q processors, and virtually any type of 
micro- electronic circuit or micro-electronic 

10 component . 

FIGURE 3 is meant to a show a variety of 
possible arranc-etuents of conductive members such as 
bond wires in an ant i- tamper shield of an IC. Tt: 
should be understood that not all of the bond wires 

1.5 shown are required, and that the specific number and 

positioning of the bond wires can vary. 

In one example configuration, a signal having a 
positive voltage Vi,,tt supplied to a iDond pad 

310, which is electrically coupled to a bone pad 

2G 312, a trace 314, and a bond pad 316. Similarly; a 

negative voltage V,^ is present at a bond pad 318, 
which is electrically coupled to a bond pad 32 0, a 
trace 322, and a bond pad 324. The vcltags Vb^.^ may 
be used to provide a current which, when terminated. 

25 triggers an autooiatic erasure (e.g., sei f -des crucz: ) 

feature of the processor 150. 

Bond wires can be coupled between bond pads 
which are external to the processor 15 0 and bond 
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pads v/hich are internal (e.g., locaned wirhin) the 
processor 150. For example, a bond wire 512 may be 
cnuplad between cae external bond pad 312 and the 
intarnal bond pad 326 in che region cf whe ?J\M 300. 
5 Pad 3 26 is sliown as being Located outside tlae RATI 

300, but may couple an electrical signal zo the RATI 
330 via a trace, for example, not shovn. 

3irailarl,y, in the region of "he CPU 302, a bond 
wire 319 may be coupled between the bond pad 32 0 
10 which is ex-ernal to the proce^ssor 15Q and the bond 

pad 3 28 of the CPU 302 which is internal to the 
processor 150. A bond wire 317 nay be coupled 
between the bond pad 316 which is external to the 
processor 150 and the bond pad 332 of the CPU which 
; 15 is internal to the processor 150. In the region of 

the ROM 3 04, a bond wire 325 may be coupled between 
the external bond pad 3 24 and the internal bend pad 
336 of the ROM 304 . 

Bond wires can also be coupled between bond 
. 20 pads which are both internal to the processor ISO. 

For example, a bond wire 331 may be coupled between 
interp.al bond pads 3 30 and 33 8 . 

Bond wires can be further be coupled between 
bond pads which are Gjxternal to thf? processor 150. 
25 For example, a bond wire 341 may be coupled between 

external bond pads 340 and 342, and a bond wire 345 
may be coupled between external bond pads 344 and 
346 . 
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Additionally, bond wires can be coupled between 
lead frame contacts and external or internal bond 
pads, or other lead frame con"acts. For example, a 
bond wire 351 tr.ay be coupled be-ween a lead frarr.e 
contact 350 and an external bond pad 352. A bond 
wire 356 may be coupled between a lead frame contact 
355 and an internal bend pad 357. A bend wire 361 
may be coupled between a Itaad frame conracc 36(J and 
anotlaer lead frame contact 362." As indicated by -he 
broken line, the lead frame cuiicact 3S2 -may be a 
package lead which is located zurther crom the 
processor 150 r.tian the contact 360, Note that the 
positioning of the lead frame contacts and bond pads 
in FIGURE 3 is not necessarily to scale. A bond 
wiro 3GG may* be coupled between a lead frame contact 
3€5 and an external bond pad 367. A. bond wire 371 
may be coupled between a lead frame contact 370 and 
another lead frame contact 372. 

Furthermore, a bond wire can be coupled between 
a bond pad or lead frame contact of the processor 
15C directly to a decoder board (e.g., personal 
computer (PC) board) on which the processor 150 
carried, or any ccher locaticn which allows the bond 
wire to carry a currant loop or other signal for use 
by the processor 150. In this case, mere removal of 
the chip paclcage from the board or other location 
will rupture the anti- tamper bond wire. 
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Addi-ionaliy, a bond wire can be coupled 
between external pads, such as pads 340 aad 342, 
where tae bond wire does not extend over the surface 
of the processor 150, but e^xtends away from the 
5 surface of the processor, for example, in a loop 

(not shown; . A similar configuration can be had 
with the contacts, such as contacts 370 and 372, 
whGrG the hood wire 371 extends away from the 
processor 150. Thus, the bond wire can be routed to 
10 a region which is somewhat distant from the 

pro;:essor 150, e.g., where the pirate may nor expect 

to find it . 

The secure processor 150 cray be carried in an 
ic which is embedded in a smart card A smart card 

15 is typically a plas-ic credit-card sized device 

which contains ICs . The snart card is inserted inco 
a reader to allow a component to interface with the 
ICs . There are various methods of packaging ICs 
into a card. For example, afcer an IC is wire 

2 0 bonded to contacts of a lead frame, epoxy can be 

transfer molded arcund che die prior to injection 
TTiolding of a card. Another approach is to apply 
epoxy to a cavity in a. card body prior to insertion 
of the contact/die assembly into the same smart card 

2 5 body. In either case, an epoxy encapsulati.ng 

compound can be made to flow around the conductive 
members . 
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Furthermore, -he body of the smrc card forrr.s 
part of the encapsulating layer of the IC. 

Moreovsr, the bond wires of nhe IC may be routed in 
the body of the srr.arr. card away from tiie region in 
5 v/hich the IC is eiribedded such that any tampering 

with the smart card ruptures the bond wires. 

The use of ccaductive epoxy to provide an anti- 
tampar shisld. in a smart card is particularly 
advantageous since :l~ allows a lower profile for the 

10 card. The conductive epoxy can be prin-ed as a thin 

tracs //hlch extends over tht^ IC. 

FIGUTlE ^ is a top view of. a secure proccGGor of 
an integrated circui" wi,zh an anti -probing wxre grid 
shield in accordance with the present invention. 
: 15 Bond wires may be provided in a grid pattern with a 
spacing which is small enough to preven- a probe tip 
from passing through the rr.esh or moving easily 
within the mesh. In facz, tnis configuration may be 
usee even when the wire dees not carry an electrical 

20 signal which the processor requires to function. 

Tha mere presence of the wires (e.g., dummy wires) 
in a grid serves as a deterrent to probing. 

In an example implementation of a wire grid 
shield, a processor 450 includes a micro-slectrcnic 

25 componsnt ^xio such as a memory. Bond wires 421, 

42 3, and 4 25 are coupled betv/een bone pads 42 0 and 
430, 422 and 432, and 424 and 434, respectively. 
Similarly, bond wires 451, 453, and 454 are coupled 
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between bond pads 448 and 460, 452 and 462, and 454 
and 4 64, respectively. The wires form a grid 
patcern, shown generally ac 460, which covers Che 
micro -electronic component 410. The dimensions of 
5 Che grid 460 may he adjusted to aggravate the 

movement of the tip cf a probe which a pxrate may 
use . 

The wires of the grid 46 0 mav^ optionally carry 
a signal which is used by the nicro- electronic 

10 circuit 410 to operate. In th:L5 case, it may be 

preferable for some or all of the wires to avoid 
coii-acting each other to dva_d a short circuit. If 
so, the wires may be displaced from cne another as 
required to maintai.n the grid pattern while avoiding 

15 a short circuit. 

When dummy wires are used in a grid or other 
pattern, it is des:,rable to select a wire 
composit:Lon which has a high resistance to the 
chemical etchants which may be used by a pirate in 

20 etching the epoxy or other protective layer of the 

IC. As mentioned, metals such as gold, for example, 
have a relatively high resistance to etchants. 

Accordingly, it can be seen that there are many 
possible configurations for usrng bond v/ires in an 

25 anti-tamper shield to prevent an unauthorized 

decapsulation of a chip. With the anti-tamper 
shield of the present invention, a pirate employing 
3 mechanical grinder for decapsulation would have to 
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leave a great deal of the encapsulating compound in 
place or risk rupturing the bond wires. In fact, 
the bond wires can be arranged such that most of the 
epoxy must be left undisturbed to avoid rupcuring 
5 the vires. If ci wire ia ruptured, a self-destruct 

sequence of the chip may be initiated^ or a required 
control signal path tr.ay be terminated, thereby 
requiring a t^ime -consuming and difficult repair by 
the pirate. 

;;0 Moreover, even if the wire does not initiate a 

self-destruct sequence or carry a required control 
signal; the mere presence of the wire can interfere 
with efforts to map the chip via an x-ray machine. 
Thus, thQ mere presencG of "dumray" bond wire<5 in an 

15 anti-tamper shield, particularly in a grid pattern, 

will serve as a deterrent, as the pirace may not 
know whether rupturing the v/ires will render the 
processor non- functional . In either case, the 
pirate's task is made much more difficult, time- 

20 consuming and expensive, if not impossible . 

Although the invention has been described in 
connection v/ith - various specific embodiments, those 
skilled in ch^ art will appreciate that numerous 
adaptations and modifications may be made thereto 

25 without departing from the spirit and scope of the 

invention as set forth in the claims. For example, 
the invention is not limited to use with chips which 
have an epoxy encapsulating layer, but may be 
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adapted for use with a chip which has virtually any 
Lyps of protective layer, or even no protective 
laysr. For instance, the invention may be used with 
a device such as an electrically programmable read- 
5 only memory (EPROM) , which can he erased when 

exposed to ultraviolet light. An 3FR0M is typically 
procecced by an air gap and a transparent v/indow. 
In this case,* the electrically conductive me:uber may 
be carried simply in ths air '^cxp, and will pose an 
10 obstacle to a pirate even without the epoxy layer. 
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A.Brief Descriprion of Drawings 



FIGURE 1 is a sinplifiec diagram illustrating a 
decapsulated integrated circv.it. 

FIGURE 2 is a croBS - sectional view illustrating 
5 an integrated circuit with an ant i - tampar tiond. wire 

shield in accordance with the present invention. 

FIGTJR2 3- is a top view of a secure. proccGGor of 
an ^_nt.egra!::ed circuit wir.h an anti-tauiper bond wire 
shield xn accordance witli zhe present inven-lor. . 
10 FIGURS A is a top view of a secure processor ot 

aa z.iite3raced circuit v^ith an anti-probing wir:(=i grid 
shielr5 acccrdance with Ctie present invention. 
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1. Abstract 



All anti-tamper shisld for an integrated circuit 

(IC) includes a bond wire which passes through a 

protective layer such as an epoxy encapsulating 

5 layer of the IC . The bond wire carries a signal, 

such as a steady stata current, which allows an 

active coitiponent of the IC, such as a secure 

processor, to function. The bond wire is carried 
« 

within and/or proxi:nate to the encapsulating layer . 

10 £uch that a cecapsulat ion of the IC will cause a 

rupture of the electrically conductive menaher, 
thereby rendering the processor non- functional . The 
bond wire may be coupled to the processor in a 
variety of configurations, including the use of: 

15 internal or external bond pads, lead frame contacts, 

anc/or directly to a conrputer bocird on which the IC 
is carried. A metallic shield layer may be located 
between the active component and a top portion of 
the encapsulating layer to prevent a pirate from 

2 0 using an elecr^ron microscope', for example, to L^urvev 

the active component region. 



2. Representative Drawing 
None 



